1. Overview
This Privacy Policy applies to Studio.AI and all related services operated by Brandwise Technologies (“we,” “us,” or “our”). It describes how we collect, use, store, and share your personal information when you visit our website, create an account, or use our AI creative platform.
By using the Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with our practices, please discontinue use of the Service.
2. Data We Collect
We collect the following categories of information:
A. Information You Provide
- Account data: Name, email address, password, profile photo, and billing information when you register
- Content data: Text prompts, uploaded images, videos, and files you submit to generate AI outputs
- Communications: Messages you send to our support team or through feedback forms
- Payment data: Credit card details (processed securely via Stripe — we never store full card numbers)
B. Data We Collect Automatically
- Usage data: Pages visited, features used, prompts generated, session duration, and click patterns
- Device data: IP address, browser type, operating system, device identifiers, and time zone
- Log data: Server logs including access times, error reports, and API calls
C. Data from Third Parties
- Authentication data if you sign in via Google, Apple, or another OAuth provider
- Analytics data from providers such as Google Analytics or Amplitude
3. How We Use Your Data
We use the data we collect to:
- Provide, operate, and improve the Service
- Process your prompts and generate AI-powered creative outputs
- Manage your account, subscriptions, and billing
- Send transactional emails (receipts, account alerts, password resets)
- Send product updates and marketing communications (you may opt out at any time)
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations and enforce our Terms
- Conduct research and analytics to understand usage patterns and improve our AI models (using anonymized/aggregated data where possible)
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal data within 30 days, except where we are required to retain it by law (e.g., financial records retained for 7 years).
AI-generated outputs stored in your workspace are deleted when you delete them or close your account. Backup copies may persist for up to 90 days before permanent deletion.
7. Data Security
We implement industry-standard security measures to protect your data, including:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Role-based access controls limiting employee access to personal data
- Regular security audits and penetration testing
- SOC 2 Type II compliance (in progress)
Despite our efforts, no system is 100% secure. In the event of a data breach affecting your rights, we will notify you within 72 hours in accordance with applicable law.
8. Your Privacy Rights
Depending on your location, you may have the following rights:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion:Request deletion of your personal data (“right to be forgotten”)
- Portability: Receive your data in a machine-readable format
- Objection: Object to processing based on legitimate interests or for direct marketing
- Restriction: Request that we restrict processing of your data in certain circumstances
- Withdrawal of consent: Withdraw consent at any time where processing is based on consent
To exercise these rights, contact us at privacy@studio.ai. We will respond within 30 days.
9. Children's Privacy
The Service is not directed to children under the age of 18. We do not knowingly collect personal information from children. If we become aware that a child under 18 has provided us with personal data, we will take steps to delete it promptly.
If you believe a child has provided their information to us, please contact us at privacy@studio.ai.
10. Third-Party Links
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party sites you visit.
11. AI & Model Training
We do not use your private content or AI-generated outputs to train our AI models without your explicit, opt-in consent. Content you submit is processed solely to generate your requested output.
We may use aggregated, anonymized usage patterns (e.g., prompt categories, feature adoption rates) to improve the platform. This data cannot be traced back to any individual user.
If you participate in any research or beta program that involves content usage for model improvement, you will be clearly informed and given the opportunity to opt out.
12. International Transfers
Your data may be processed in countries other than your own, including the United States, where our primary infrastructure is located. For transfers from the EU/EEA or UK, we rely on:
- Standard Contractual Clauses (SCCs) approved by the EU
- Adequacy decisions where applicable
- UK International Data Transfer Agreements (IDTAs)
13. Policy Updates
We may update this Privacy Policy periodically. We will notify you of material changes via email or a prominent notice on the Service at least 14 days before they take effect. The “Last Updated” date at the top of this page indicates when the most recent changes were made.
14. Contact & DPO
For any privacy-related questions, requests, or concerns, please contact us: